Microsoft Certified Azure Fundamentals · Free Practice Question Medium
Question 44
A company is planning to deploy a web server and database server, as shown in the architecture diagram below. You have to ensure that traffic restrictions are in place so that the database server can only communicate with the web server.
Which of the following would you recommend for implementing these restrictions?
-
A
D. A Virtual Private Gateway
-
B
C. A Local Network Gateway
-
C
A. Network Security Groups (NSGs)
-
D
B. Azure Service Bus
Reveal correct answer
Correct answer: C
Explanation
Answer: A
It would help if you used network security groups to allow or deny traffic within subnets.
Below is what the Microsoft documentation mentions in terms of filtering network traffic.
Option B is incorrect since this is used as a messaging system.
Option C is incorrect since this is used to represent a VPN device in a Site-to-Site VPN connection.
Option D is incorrect since this is normally used to connect networks via the Internet.
Remember, Network Security Group (NSG) and Application Security Group (ASG) are two different things. Please visit the below URL to know about ASG-
For more information on network planning and design, please visit the below URL-
Discussion
Think the marked answer is wrong, or have a better explanation? Share it below — comments appear after review.
